Pages:
Author

Topic: Stolen Bitcoin (Read 2264 times)

legendary
Activity: 2674
Merit: 1082
Legendary Escrow Service - Tip Jar in Profile
July 28, 2015, 04:36:14 PM
#55
Thats interesting and i hear that the first time.

Really?  This has been well established since blockchain.info wallet was first announced.  How did you manage to participate in this forum long enough to become "Legendary" status without understanding that blockchain.info receives encrypted private keys and does not receive the decryption key?

By not using online wallets. Tongue

I never understood why someone would put his coins to a website that only serves as a wallet when he could hold his coins safe at his own home too.

Sure, but previously when you said:

Online wallets are too insecure for me. I mean why taking the risk to give another person all your bitcoins only for letting them lay there?

Someone responded explaining:

blockchain.info never gets access to your private keys.  They are stored on their server encrypted, but the encryption/decryption occurs in your browser, so they cannot steal your coins.

You do understand that your wallet doesn't actually have your bitcoins, right?  Your bitcoins (to the extent that they even exist) are represented in the blockchain that every full node has a copy of.  Your wallet is just storing your private keys for you.  If there is malware running on your computer, it can steal your bitcoins (by gaining access to your private keys) just as easily from your desktop wallet as from a web based wallet like blockchain.info.

Yes, i know that bitcoins belong to those who can access them on the global blockchain and accessing can who has the private key. Regarding blockchain.info, i simply did hear the first time that blockchain doesnt actually has the private keys. Thats interesting.

Sure, private computers can be hacked too though you can protect yourself against it. I think the past has shown that generally the risk of losing coins in an online wallet is magnitudes higher than the risk losing them on your computer, when you are cautious. The percent of online wallets that went down would have brought bitcoin down when the same percent of personal wallets on computers would have been "hacked". The online wallets are simply great targets for hackers, while hackers wont bother with personal computers too much when it is hard to get something. Hackers would prefer the quick and dirty way of mass hacking.
legendary
Activity: 3416
Merit: 4658
July 27, 2015, 08:36:53 PM
#54
Thats interesting and i hear that the first time.

Really?  This has been well established since blockchain.info wallet was first announced.  How did you manage to participate in this forum long enough to become "Legendary" status without understanding that blockchain.info receives encrypted private keys and does not receive the decryption key?

By not using online wallets. Tongue

I never understood why someone would put his coins to a website that only serves as a wallet when he could hold his coins safe at his own home too.

Sure, but previously when you said:

Online wallets are too insecure for me. I mean why taking the risk to give another person all your bitcoins only for letting them lay there?

Someone responded explaining:

blockchain.info never gets access to your private keys.  They are stored on their server encrypted, but the encryption/decryption occurs in your browser, so they cannot steal your coins.

You do understand that your wallet doesn't actually have your bitcoins, right?  Your bitcoins (to the extent that they even exist) are represented in the blockchain that every full node has a copy of.  Your wallet is just storing your private keys for you.  If there is malware running on your computer, it can steal your bitcoins (by gaining access to your private keys) just as easily from your desktop wallet as from a web based wallet like blockchain.info.
legendary
Activity: 2310
Merit: 1422
July 27, 2015, 05:58:51 PM
#53
blockchain.info most certiantly DOES NOT need to know your private key...

They use normal 1... bitcoin addresses right? Then how can it be possible that its impossible for them to know the private keys? The wallets are on their servers, which means one way or another they, or at least an employee has to be able to get the keys.

Maybe i did not think it through how it could be done otherwise.

I believe they do.  And they definitely have your private key if they are withdrawing and depositing on your behalf.

Blockchain.info can not withdraw your BTC on your behalf. That makes no sense.


You Wot mate?
They're the wallet provider. They can do anything they want with your bitcoins because they keep your private keys. (Even if you export them they still have a copy of the private keys).
legendary
Activity: 2674
Merit: 1082
Legendary Escrow Service - Tip Jar in Profile
July 27, 2015, 05:40:53 PM
#52
Thats interesting and i hear that the first time.

Really?  This has been well established since blockchain.info wallet was first announced.  How did you manage to participate in this forum long enough to become "Legendary" status without understanding that blockchain.info receives encrypted private keys and does not receive the decryption key?

By not using online wallets. Tongue

I never understood why someone would put his coins to a website that only serves as a wallet when he could hold his coins safe at his own home too. So i avoided all these offers. In hindsight i believe it was a good thing. I remember a lot of these wallets, claiming they are ultra secure, only to be "hacked" in a short time. Cheesy
member
Activity: 70
Merit: 10
July 27, 2015, 11:45:00 AM
#51
we need to  protect more, i think known people are done it seems.
legendary
Activity: 1722
Merit: 1000
July 27, 2015, 11:16:09 AM
#50
Thats interesting and i hear that the first time.

Really?  This has been well established since blockchain.info wallet was first announced.   How did you manage to participate in this forum long enough to become "Legendary" status without understanding that blockchain.info receives encrypted private keys and does not receive the decryption key?

So the only thing that could compromise that would be when blockchain info somehow could achieve the passwords. Maybe by fetching them from the start or getting them with a compromised script, delivered by a corrupt employee, to the customer.

Correct, if the user receives a compromised web page (or if the user's browser or computer is compromised), then their password and their private keys can be captured and transmitted to the criminal.


This is what I was thinking...  

I grow very tired of arguing facts with people so I just leave lol.
legendary
Activity: 3416
Merit: 4658
July 27, 2015, 10:22:04 AM
#49
Thats interesting and i hear that the first time.

Really?  This has been well established since blockchain.info wallet was first announced.  How did you manage to participate in this forum long enough to become "Legendary" status without understanding that blockchain.info receives encrypted private keys and does not receive the decryption key?

So the only thing that could compromise that would be when blockchain info somehow could achieve the passwords. Maybe by fetching them from the start or getting them with a compromised script, delivered by a corrupt employee, to the customer.

Correct, if the user receives a compromised web page (or if the user's browser or computer is compromised), then their password and their private keys can be captured and transmitted to the criminal.
legendary
Activity: 2674
Merit: 1082
Legendary Escrow Service - Tip Jar in Profile
July 27, 2015, 09:13:38 AM
#48
blockchain.info most certiantly DOES NOT need to know your private key...

They use normal 1... bitcoin addresses right? Then how can it be possible that its impossible for them to know the private keys? The wallets are on their servers, which means one way or another they, or at least an employee has to be able to get the keys.

Maybe i did not think it through how it could be done otherwise.

Your browser on your computer encrypts/decrypts your blockchain.info wallet.
Blockchain.info only holds and stores your encrypted wallet and sends it to you.
In theory, they do not know your private keys.

Here is their explanation: https://blockchain.info/wallet/how-it-works

Thats interesting and i hear that the first time.

So the only thing that could compromise that would be when blockchain info somehow could achieve the passwords. Maybe by fetching them from the start or getting them with a compromised script, delivered by a corrupt employee, to the customer.

I couldnt check the image on my current internet so maybe they used an encryption that someone negates that chance. Though it have a hard time imagining how.
legendary
Activity: 1092
Merit: 1001
July 24, 2015, 03:11:03 PM
#47
blockchain.info most certiantly DOES NOT need to know your private key...

They use normal 1... bitcoin addresses right? Then how can it be possible that its impossible for them to know the private keys? The wallets are on their servers, which means one way or another they, or at least an employee has to be able to get the keys.

Maybe i did not think it through how it could be done otherwise.

I believe they do.  And they definitely have your private key if they are withdrawing and depositing on your behalf.

Blockchain.info can not withdraw your BTC on your behalf. That makes no sense.
legendary
Activity: 1092
Merit: 1001
July 24, 2015, 03:07:39 PM
#46
blockchain.info most certiantly DOES NOT need to know your private key...

They use normal 1... bitcoin addresses right? Then how can it be possible that its impossible for them to know the private keys? The wallets are on their servers, which means one way or another they, or at least an employee has to be able to get the keys.

Maybe i did not think it through how it could be done otherwise.

Your browser on your computer encrypts/decrypts your blockchain.info wallet.
Blockchain.info only holds and stores your encrypted wallet and sends it to you.
In theory, they do not know your private keys.

Here is their explanation: https://blockchain.info/wallet/how-it-works
full member
Activity: 154
Merit: 100
That Darn Cat
July 24, 2015, 02:45:14 PM
#45
blockchain.info most certiantly DOES NOT need to know your private key...

They use normal 1... bitcoin addresses right? Then how can it be possible that its impossible for them to know the private keys? The wallets are on their servers, which means one way or another they, or at least an employee has to be able to get the keys.

Maybe i did not think it through how it could be done otherwise.

I believe they do.  And they definitely have your private key if they are withdrawing and depositing on your behalf.
legendary
Activity: 2674
Merit: 1082
Legendary Escrow Service - Tip Jar in Profile
July 24, 2015, 02:40:48 PM
#44
blockchain.info most certiantly DOES NOT need to know your private key...

They use normal 1... bitcoin addresses right? Then how can it be possible that its impossible for them to know the private keys? The wallets are on their servers, which means one way or another they, or at least an employee has to be able to get the keys.

Maybe i did not think it through how it could be done otherwise.
I E
member
Activity: 62
Merit: 10
💎 💎 💎 💎 💎
July 24, 2015, 11:49:52 AM
#43
Hi all,

I am the owner of 19BWxdCtmTcWupG6tQjXZD7F4hDd6ftEri

I logged in and had a look about 3 hours ago and lo and behold, exactly one Bitcoin has disappeared.



Does anyone know what is going on or can unravel this for me?



only hold pocketchange in such a wallet.

for bigger amounts, use cold storage or a hardware wallet:

https://bitcointalksearch.org/topic/overview-bitcoin-hardware-wallets-secure-your-coins-899253



True i only hold maximum 10 BTC on thoose kinds of wallets.
legendary
Activity: 1148
Merit: 1011
In Satoshi I Trust
July 24, 2015, 11:46:13 AM
#42
Hi all,

I am the owner of 19BWxdCtmTcWupG6tQjXZD7F4hDd6ftEri

I logged in and had a look about 3 hours ago and lo and behold, exactly one Bitcoin has disappeared.



Does anyone know what is going on or can unravel this for me?



only hold pocketchange in such a wallet.

for bigger amounts, use cold storage or a hardware wallet:

https://bitcointalksearch.org/topic/overview-bitcoin-hardware-wallets-secure-your-coins-899253

legendary
Activity: 1722
Merit: 1000
July 24, 2015, 11:43:15 AM
#41
blockchain.info most certiantly DOES NOT need to know your private key...
legendary
Activity: 2674
Merit: 1082
Legendary Escrow Service - Tip Jar in Profile
July 24, 2015, 11:35:12 AM
#40
Lol no....I was quite sober. half hour before that I moved something.

BlockChain don't seem to respond with more than the following:

"I'm sorry to hear of this trouble, but the bitcoin network is designed to make chargebacks impossible. Blockchain.info never has access or control of a user's bitcoins in any way, which means only the end user has 100% control over his own bitcoins. This means we have no power to stop or reverse a transaction for you, or even know what exactly happened here."

I will keep pressing them - like I said my main concern is if something strange happened in their wallet - there have been a lot of stories of BlockChain wallets screwing up so I just have to find out which it is - whether I have been actually hacked or whether something has gone wrong with their wallet which many people have seemingly complained about, when I searched around the net.

Find it strange that they are not more forthcoming, considering the amount of issues that they have had with wallet one would imagine they would want to investigate and figure out.



They are 100% telling the truth.. they have no clue about your private key, etc.  Blockchain.info can do nothing for you.  The odds are VERY high you have maleware on your comp. 

... their product is designed to ensure they cannot take your BTC.. nor a gov if they take over blockchain.info.....  due to the fact it's an online walle one should never store mass amounts of their BTC there. 


They need to know the private key. Maybe they dont want to look into it but the wallet only can work when they know the private key.

So maybe an employee thinks he can steal a bit by withdrawing 1 bitcoin there, one bitcoin there and so on?

Besides that... why were the address emptied with 2 transactions then. Doesnt sound like op would have done it. And a hacker not too, because they would take all.
legendary
Activity: 1204
Merit: 1028
July 24, 2015, 11:30:10 AM
#39
This again highlights the huge weakness of bitcoin as they are stored and protected (not!) at the moment. If people loose money in a banking account most of the time they will get their money back. For bitcoin.... it's just "so sorry, too bad".

It's not Bitcoin's fault, it's people fault because they probably don't take enough measures to keep their computer safe. But make no mistake, this will be a huge reason why companies like Xapo will be double figure billion companies in the future if not more. All the people that aren't computer literate enough will simply hold their Bitcoins there.
legendary
Activity: 1722
Merit: 1000
July 24, 2015, 10:02:26 AM
#38
Lol no....I was quite sober. half hour before that I moved something.

BlockChain don't seem to respond with more than the following:

"I'm sorry to hear of this trouble, but the bitcoin network is designed to make chargebacks impossible. Blockchain.info never has access or control of a user's bitcoins in any way, which means only the end user has 100% control over his own bitcoins. This means we have no power to stop or reverse a transaction for you, or even know what exactly happened here."

I will keep pressing them - like I said my main concern is if something strange happened in their wallet - there have been a lot of stories of BlockChain wallets screwing up so I just have to find out which it is - whether I have been actually hacked or whether something has gone wrong with their wallet which many people have seemingly complained about, when I searched around the net.

Find it strange that they are not more forthcoming, considering the amount of issues that they have had with wallet one would imagine they would want to investigate and figure out.



They are 100% telling the truth.. they have no clue about your private key, etc.  Blockchain.info can do nothing for you.  The odds are VERY high you have maleware on your comp. 

... their product is designed to ensure they cannot take your BTC.. nor a gov if they take over blockchain.info.....  due to the fact it's an online walle one should never store mass amounts of their BTC there. 
legendary
Activity: 1722
Merit: 1000
July 24, 2015, 09:59:33 AM
#37
This again highlights the huge weakness of bitcoin as they are stored and protected (not!) at the moment. If people loose money in a banking account most of the time they will get their money back. For bitcoin.... it's just "so sorry, too bad".

I agree bitcoin is not for technology noobs.

If you are not storing your BTC on an offline computer they are not safe.
legendary
Activity: 2674
Merit: 1082
Legendary Escrow Service - Tip Jar in Profile
July 24, 2015, 09:48:49 AM
#36
This address is empty now https://blockchain.info/address/19BWxdCtmTcWupG6tQjXZD7F4hDd6ftEri

Did you clear it? Then why in small jumps? And is 0.0001 Bitcoin the standard fee on blockchain.info wallet? If so then it might be a hint that it was sent from there and not with a private key. A small hint though.

But in fact i think the most probably answer is that you sent it yourself and forgot that you paid something at that time. Can happen for various reasons when you overworked.

Maybe you wanted to send from another address and chose another one?

By the way... is this address maybe part of a shared wallet? Your deposit address maybe? If its a shared wallet then this address doesnt belong to you.

Im  not sure now if blockchain offers that possibility.
Pages:
Jump to: